CVE-2023-31044

Description

An issue was discovered in Nokia Impact before Mobile 23_FP1. In Impact DM 19.11 onwards, a remote authenticated user, using the Add Campaign functionality, can inject a malicious payload within the Campaign Name. This data can be exported to a CSV file. Attackers can populate data fields that may attempt data exfiltration or other malicious activity when automatically executed by the spreadsheet software.

PUBLISHED Reserved 2023-04-23 | Published 2026-03-03 | Updated 2026-03-03 | Assigner mitre

References

nokia.com

www.gruppotim.it/...m/2023/Motive-Impact-CVE-2023-31044.html

cve.org (CVE-2023-31044)

nvd.nist.gov (CVE-2023-31044)

Download JSON